Which component of the Security Content Automation Protocol (SCAP) specification contains the data required to estimate the severity of vulnerabilities identified automated vulnerability assessments?

A.

Common Vulnerabilities and Exposures (CVE)

B. Common Vulnerability Scoring System (CVSS)

C. Asset Reporting Format (ARF)

D. Open Vulnerability and Assessment Language (OVAL)